Frequent reauth doesn't make you more secure

Re:Frequent reauth doesn't make you more secure by gausswho on Thursday June 12, 2025 @05:35PM (#44263458)

Pretty rich coming from a company that only let's you create an account via SSO from the largest offenders of this.

[ Parent | on HN ]

Re:Frequent reauth doesn't make you more secure by tayiorrobinson on Thursday June 12, 2025 @05:38PM (#44263477)

and also requires you to relogin every so often (to be fair it's 90 days not 24h)

and you can just use a custom OIDC IDP with tailscale, for all 15 of us that have custom OIDC IDPs

[ Parent | on HN ]

Re:Frequent reauth doesn't make you more secure by pfych on Thursday June 12, 2025 @05:53PM (#44263596)

It at least got me to learn how to self-host my own identity provider!

[ Parent | on HN ]

Re:Frequent reauth doesn't make you more secure by gausswho on Thursday June 12, 2025 @06:27PM (#44263884)

Do tell!

[ Parent | on HN ]

Re:Frequent reauth doesn't make you more secure by pfych on Thursday June 12, 2025 @07:38PM (#44264361)

I set up Authentik[^1] on my NAS in a docker container and went from there! Just had to add a .well-known webfinger file to my domain that pointed to the Authentik instance and it "just worked" with Tailscale.

[^1]: https://goauthentik.io/

[ Parent | on HN ]

Re:Frequent reauth doesn't make you more secure by gausswho on Wednesday June 18, 2025 @06:30PM (#44313835)

Interesting, I'll have to try this. It's still not the anonymity I desire from my private VPN (due to domain requirements) but at least the giants can't rug pull you.

[ Parent | on HN ]